BUNDESPOLIZEI / Ihr Computer wurde gesperrt

itsme42

Hallo cosinus,
danke schon mal dafür, dass Du uns helfen willst.

Ich habe ESET installiert und den scan gestartet.
Hier ist das Ergebis aus der LOG-Datei:

ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-06-28 06:48:30
# local_time=2012-06-28 08:48:30 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1024 16777215 100 0 13064088 13064088 0 0
# compatibility_mode=5893 16776574 66 85 41894759 92532516 0 0
# compatibility_mode=8192 67108863 100 0 272 272 0 0
# scanned=181755
# found=22
# cleaned=0
# scan_time=6643
C:\$Recycle.Bin\S-1-5-21-4284497293-1136568860-3551687546-1000\$R038245.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\$Recycle.Bin\S-1-5-21-4284497293-1136568860-3551687546-1002\$RRG7J0R.exe probably a variant of Win32/Adware.LXVWVIE application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarApp.dll a variant of Win32/Toolbar.Babylon application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarEng.dll Win32/Toolbar.Babylon application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarsrv.exe probably a variant of Win32/Toolbar.Babylon application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll Win32/Toolbar.Babylon application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll Win32/Toolbar.Babylon application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BearShare Applications\MediaBar\Datamngr\BrowserConnection.dll Win32/Toolbar.SearchSuite application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BearShare Applications\MediaBar\Datamngr\datamngr.dll Win32/Toolbar.SearchSuite application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe a variant of Win32/Toolbar.SearchSuite application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BearShare Applications\MediaBar\Datamngr\DnsBHO.dll Win32/Toolbar.SearchSuite application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\BearShare Applications\MediaBar\Datamngr\IEBHO.dll Win32/Toolbar.SearchSuite application (unable to clean) 00000000000000000000000000000000 I
C:\Program Files (x86)\PDFCreator\message.exe a variant of Win32/InstallCore.A application (unable to clean) 00000000000000000000000000000000 I
C:\ProgramData\dolzowms.exe a variant of Win32/Kryptik.AHHK trojan (unable to clean) 00000000000000000000000000000000 I
C:\ProgramData\fzvdabqn.exe a variant of Win32/Kryptik.AHHK trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\All Users\dolzowms.exe a variant of Win32/Kryptik.AHHK trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\All Users\fzvdabqn.exe a variant of Win32/Kryptik.AHHK trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Sebastian\AppData\Local\Temp\jar_cache6378937210097912766.tmp a variant of Java/Agent.EP trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Sebastian\AppData\Local\Temp\V.class a variant of Java/Agent.EQ trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Sebastian\AppData\Roaming\AcroIEHelpe145.dll Win32/Spy.Banker.YAT trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Sebastian\AppData\Roaming\01048\components\AcroFF048.dll a variant of Win32/Spy.Banker.YAH trojan (unable to clean) 00000000000000000000000000000000 I
${Memory} a variant of Win32/Toolbar.SearchSuite application 00000000000000000000000000000000 I


ich hoffe das hilft uns weiter ;-)

Gruß
Michael